Forums / Installing on a Linux/Unix Server / WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

Locked

Started by kjharrison on 17 Sep 2008, 6:02 PM · Views: 7,405

Results 1 to 8 of 8
This thread is locked. New replies are disabled.
17 Sep 2008, 6:02 PM
#1
kjharrison avatar

kjharrison

Zen Follower

Join Date:
Jun 2006
Location:
Providence
Posts:
137
Plugin Contributions:
0

WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

After making a test transaction with Authorize.net on the chat, I got this message:

WARNING: Security hash problem. Please contact store-owner immediately. Your order has not been fully authorized.

I was told that it's my shopping cart and not the gateway. We did make a new key and tried again, but the same thing happened.

What concerns me most is that the SSL never cicked in during the transaction. I'm also running in maintenance mode. Is this message coming up because the SSL is not being used for some reason?

Ken.

17 Sep 2008, 6:52 PM
#2
stevesh avatar

stevesh

Black Belt

Join Date:
Feb 2005
Location:
Lansing, Michigan USA
Posts:
19,793
Plugin Contributions:
2

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

If you search the forum for "hash problem" you'll find several threads that addresss your problem.

17 Sep 2008, 7:40 PM
#3
kjharrison avatar

kjharrison

Zen Follower

Join Date:
Jun 2006
Location:
Providence
Posts:
137
Plugin Contributions:
0

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

I re-installed my Authnet_AIM account, tried to pake the it work and I still got the message. I'm still concerned about the SSL not coming up.

17 Sep 2008, 8:10 PM
#4
stevesh avatar

stevesh

Black Belt

Join Date:
Feb 2005
Location:
Lansing, Michigan USA
Posts:
19,793
Plugin Contributions:
2

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

Sounds like you may not have SSL enabled properly in your configure.php files.

17 Sep 2008, 8:34 PM
#5
kjharrison avatar

kjharrison

Zen Follower

Join Date:
Jun 2006
Location:
Providence
Posts:
137
Plugin Contributions:
0

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

stevesh:

Sounds like you may not have SSL enabled properly in your configure.php files.

That's what I was th inking. Right now I have to head out, so I'll have to get to it in the morning or later tonight. I'll let you know if it works.

18 Sep 2008, 12:21 PM
#6
kjharrison avatar

kjharrison

Zen Follower

Join Date:
Jun 2006
Location:
Providence
Posts:
137
Plugin Contributions:
0

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

The SSL problem was that I forgot to enable SSL for the shopping cart in the config.php file. Oops.

The hash problem was because I didn't use the MD5 Hash, which means I had to clear out all the text that is in that field by default. I will set it up with the MD5 Hash for the extra security now that I know for sure that everything is working fine.

Thank you for pointing me in the right direction!
Ken.

1 Apr 2009, 2:37 PM
#7
spiralmedia avatar

spiralmedia

New Zenner

Join Date:
Oct 2008
Posts:
31
Plugin Contributions:
0

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

You don't need to use the MD5-Hash. I had that same issue and spoke with Authorize.net and it is just an added security feature, but everytime you log in to the admin and make any change, the MD%-Hash will change so it will always cause that message. It is an optional element, so just eliminate the message from popping up on the Zen Cart screen and you'll be all set.

1 Apr 2009, 3:35 PM
#8
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,511
Plugin Contributions:
176

Re: WARNING: Security hash problem. Please contact store-owner immediately. Your order ha

spiralmedia:

... but everytime you log in to the admin and make any change, the MD%-Hash will change ...
Um, I'm not sure who told you that ... but ... if you're referring to the MD5 Hash "keyphrase" which you enter in your Authnet profile settings and in your Zen Cart admin settings, you're mistaken ... because that keyphrase does NOT change with every admin login.
(The MD5 hash generated for each transaction using the keyphrase as a "base" will naturally change with each transaction, but the keyphrase in the admin areas does NOT change with every admin login.)

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.